<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Agency FB";
panose-1:2 11 5 3 2 2 2 2 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal" style="line-height:27.0pt"><span lang="EN" style="font-size:18.0pt;font-family:"Georgia",serif;color:black">New University of Arizona Data Classification and Handling Standard<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">To:</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">
All University of Arizona Employees <o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:black">From:</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:black">
<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:15.6pt"><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Christian Schreiber, University Information Security Officer<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Subject:</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">
New University of Arizona Data Classification and Handling Standard <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Date:</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">
April 29, 2015 <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333"><a href="http://security.arizona.edu/" target="_blank"><span style="color:#003366">UA Information Security</span></a></span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">
has updated the University’s <b><a href="http://security.arizona.edu/data-classification-and-handling-standard" target="_blank"><span style="color:#003366">Data Classification and Handling Standard</span></a></b> (IS-2321) in order to provide more prescriptive
guidance for the classification and handling of University information assets. The new standard clearly defines four categories of data:<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Regulated:</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">
Data controlled by federal, state, local and/or industry regulations. These data are affected data breach notification laws and contractual provisions in government research grants, which impose legal and technical restrictions on the appropriate use of institutional
information.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Confidential:</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">
Data protected as Confidential by law, contracts, or third-party agreement, and by the University for confidential treatment. Unauthorized disclosure, alteration or destruction of this data type could cause a significant level of risk to the University or
its affiliates.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Public:</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">
Data that may be disclosed to any person, regardless of affiliation with the University. Some level of control is required to protect the integrity and availability of Public data (e.g., protecting original (source) documents from unauthorized modification).<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Internal:</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">
Data not intended for public use or exposure. Internal data generally should not be disclosed outside of the University without the permission of the person or group that created the data. Any data not specifically classified as Regulated, Confidential or
Public should be considered Internal.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Please click
<b><a href="http://security.arizona.edu/data-classification-and-handling-standard" target="_blank"><span style="color:#003366">here</span></a></b> to view the full standard.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">If you have any questions, please contact our office at
<a href="mailto:infosec@email.arizona.edu"><span style="color:#003366">infosec@email.arizona.edu</span></a> or (520) 621-8476.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.75pt;line-height:15.6pt"><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">Attached:<o:p></o:p></span></b></p>
<p class="MsoNormal" style="line-height:15.6pt"><b><span style="font-size:11.5pt;font-family:"Arial",sans-serif;color:black"><img border="0" width="16" height="16" id="Picture_x0020_2" src="cid:image001.png@01D0835A.5ECC0A70" alt="http://uaatwork.arizona.edu/modules/file/icons/application-pdf.png"></span></b><b><span lang="EN" style="font-size:11.5pt;font-family:"Arial",sans-serif;color:black"><a href="http://uaatwork.arizona.edu/sites/default/files/uannouncerevisedstandard2015final.pdf" target="_blank"><span style="color:#003366">uannouncerevisedstandard2015final.pdf</span></a>
<o:p></o:p></span></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><i><span style="font-size:14.0pt;font-family:"Agency FB",sans-serif;color:#1F497D">Mario A. Marquez<br>
Systems Administrator Principal<br>
University of Arizona<br>
College of Agriculture and Life Sciences<br>
School of Plant Sciences<br>
marquezm@email.arizona.edu</span></i></b><span style="font-size:14.0pt;font-family:"Agency FB",sans-serif;color:#1F497D"><br>
<b><i>Office 520-621-1257<br>
Cell 520-429-2902<o:p></o:p></i></b></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:#1F497D"><img border="0" width="198" height="96" id="Picture_x0020_1" src="cid:image002.gif@01D0835A.5ECC0A70" alt="UAriz-CALS-logo-247"></span><span style="font-size:14.0pt;font-family:"Agency FB",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>